Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File:                     MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier:          0m5zvVNT8/oFWwgA6pWY6jL6EPPNZXPgwdnA931rsbo=
Subject key identifier:   80:47:64:76:2D:03:A6:F4:34:34:4B:43:2C:4E:CC:90:9C:F6:7B:09
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer:       /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial:       019D25842096C9C74343C06ADCE294ED0A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number:          05A1
Signing time:             Wed 25 Mar 2026 15:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:49 +0000
Files and hashes:         1: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: a0aYCI798At3MUV1l++wk3+eBQtWwWgTZi5NWU80DTk=)
                          2: xlFYwotI5LT7U1ruSVgb-S5VJbc.roa (hash: q+/WCbLPl7YfFx8PdlPWZvXVYgpytcYGjRYRlu/2J98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:20:96:c9:c7:43:43:c0:6a:dc:e2:94:ed:0a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
        Validity
            Not Before: Mar 25 15:01:49 2026 GMT
            Not After : Mar 26 15:01:49 2026 GMT
        Subject: CN=804764762d03a6f434344b432c4ecc909cf67b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:85:2b:84:71:0b:0a:44:06:11:4f:46:4b:
                    2e:95:47:2d:f5:ad:dd:d4:7c:1f:9f:1e:05:e9:70:
                    6d:8b:31:ed:76:70:8d:a7:53:25:ef:a7:a0:44:77:
                    f7:01:0c:da:98:3c:41:33:9f:65:b7:5d:e4:d1:5f:
                    59:67:00:61:fa:52:a1:06:18:aa:96:74:d2:77:a9:
                    88:0b:22:0f:05:ba:e2:c0:40:d4:cf:dd:4c:72:5d:
                    de:be:f8:6d:61:12:ff:f3:34:d3:54:4a:32:5e:d2:
                    35:2f:37:a6:c9:e8:eb:91:5f:52:c6:7a:f3:48:3a:
                    91:69:ad:53:a0:65:ab:07:f6:bf:a2:53:67:69:41:
                    de:b6:73:f7:c7:5d:d5:48:66:45:cf:de:21:c0:79:
                    20:77:5a:b7:44:a3:ba:96:18:75:e7:30:53:de:fc:
                    cb:c9:80:83:9d:fa:aa:d4:94:01:ec:51:61:1c:e7:
                    74:47:82:03:f4:05:c3:91:16:82:e8:68:9d:a5:36:
                    3d:ac:23:0a:85:de:5a:76:61:87:84:87:45:54:ea:
                    9b:fd:94:2b:f6:3d:1b:8b:28:ba:f3:bd:56:4d:e3:
                    1b:d8:24:dc:29:86:20:84:e7:71:14:bd:28:98:e5:
                    9c:49:4d:e2:73:23:31:f9:73:c5:d8:96:f7:c6:4e:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:47:64:76:2D:03:A6:F4:34:34:4B:43:2C:4E:CC:90:9C:F6:7B:09
            X509v3 Authority Key Identifier:
                keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:8c:b0:d0:65:a5:bc:28:eb:00:92:41:6b:67:be:0b:9f:
         a3:92:64:db:aa:3c:45:e4:58:95:af:a0:be:c6:5f:87:dc:5d:
         a0:c6:9c:3d:02:c8:8b:22:3f:f3:b7:10:80:fa:07:3e:97:93:
         0f:76:ec:f9:ed:41:09:fa:8e:41:39:b9:ee:ab:b0:3c:84:30:
         49:af:77:45:1c:7b:db:34:48:39:e7:d1:66:e4:d7:d3:f4:57:
         23:35:8a:0b:f5:f1:27:74:0d:71:31:ae:0c:d4:c6:0d:d9:92:
         52:83:03:8b:9e:a0:96:7d:69:e5:d6:02:58:0d:79:f3:ef:df:
         e7:f6:32:3c:57:02:ff:2a:a3:5f:b1:b6:07:95:90:c6:36:82:
         f7:d9:8b:38:c8:a4:8e:b3:26:38:31:fd:2a:09:b8:ff:9e:de:
         66:b3:0e:f1:63:a3:99:cc:dd:2d:a9:c8:4a:e3:e6:23:ef:8c:
         2d:48:35:13:60:9d:f9:9e:60:00:74:cc:6e:9a:30:f9:ad:db:
         f3:5d:d8:c2:0c:b1:96:40:ff:95:a1:50:24:ad:53:28:60:7c:
         eb:58:9c:64:af:a3:1b:9a:20:a1:5d:a2:86:d6:6c:5d:0d:21:
         37:fa:18:3e:40:90:da:d6:0f:e4:6f:28:e7:b5:a1:17:1a:06:
         98:d6:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:48 2026 by rpki-client